Mib-oriented protocolfor http management

ABSTRACT

Method for transmitting data packets between a network management station monitoring a network and network devices on which agents are installed, the network management station communicating with the agent of a network device via instructions; said method is characterized in that the network management station accesses a management information base of a network device by means of a configurable instruction and retrieves data packets corresponding to the configuration of the instruction.

The invention relates to a method of transmitting data packets between a network management station monitoring a network and network devices of the network, where agents are installed on the network devices and the network management station communicates with the respective agent of a network device using commands, according to the features of the preamble of patent claim 1.

A superordinate network management station is used to monitor network devices, the remote control and remote configuration of network devices and to detect errors and report errors in network devices of a network, which network management station uses a network protocol to control and monitor the network devices the network devices from a central location. The simple network management protocol (SNMP) has become established in practice, wherein this protocol describes the structure of the data packets, which can be transmitted, and the communication sequence between the network management station and the connected network devices. Agents in the network devices are used for the monitoring, which agents are programs that run directly on the network devices being monitored or are hardware that performs the same task.

For communication between the network management station and the network devices, the simple network management protocol defines six different data packets that can be transmitted (get-request, get-next-request, get-bulk, set-request, get-response and trap).

For interchanging data between the network management station and the network devices, not only is the prescribed protocol required, but also a database in the respective network device, which database is referred to as a management information base (MIB) in connection with the SNMP. This MIB is a description containing definitions of management information that can be used to remotely control, monitor and configure a network device connected to a network. As likewise already described above, SNMP is used in practice for these functions since this protocol has become globally established as a standard. The management information is referred to as managed objects, wherein, in the strict sense, a managed object is not an actual data value but rather constitutes the description of a data value. This means that the management information base of a network device does not contain any data, but rather this base describes only where these data can be found in the network device and the appearance of said data.

However, it has been found in practice that the transmission of data packets on the request of a network management station to the network device and back again is limited to the largest frame size (the so-called maximum transmission unit, MTU) permissible for an individual frame of the data packet in the network. For this reason, large-volume requests by the network management station, in particular the requests involving large pieces of data, result in requests being repeatedly strung together by the network management station, and responses from the requested network device in networks result in a long waiting time, high packet losses or comparable disadvantages that are all a critical aspect.

In a manner representative of an example from the prior art, reference is made to FIG. 2 that shows a known SNMP table request. The network management station (SNMP command requester) wishes to request a large number of data items (bulk request table) in a network device (SNMP supplier) that are intended to be transmitted back after the request. This disadvantageously cannot be carried out in a single request step, but rather a total of six steps (left-hand illustration in FIG. 2) are required according to the example in FIG. 2.

Depending on the desired bulk request table and its contents, the situation may occur in which the desired data can be requested and supplied in a single response message (right-hand illustration in FIG. 2), but this occurs rarely nowadays or no longer occurs at all since the data for controlling, configuring and monitoring the network devices by means of the network management station have reached such a large scale that they can no longer be transmitted in a single response message.

The invention is therefore based on the object of improving a method of transmitting data packets between a network management station monitoring a network and network devices of the network device without there being restrictions in the request, the compilation of the requested data and the return transmission of the compiled data.

This object is achieved by means of the features of patent claim 1.

The invention provides for the network management station to access a management information base of a network device using a configurable command and retrieves data packets corresponding to the configuration of the command. Whereas in the prior art, in particular when using the SNMP, not only the number but also the contents of the commands are firmly predefined, it is now possible using the configurable command according to the invention to retrieve precisely those data on the network device and to compile them and allow them to be transmitted on any desired scale. This advantageously removes the restriction given by the SNMP with respect to the number and contents of its commands. The protocol according to the invention, which can also be referred to as an MIB-oriented protocol (MOP), is therefore not subject to any such restrictions, in particular data size restrictions, of the SNMP. Therefore, the complete request is advantageously transmitted on the basis of an arbitrarily configurable command before the server processes it. With complete requests, the server can optimize the data processing, for example the stipulation of the blocking of a database, pipeline operations and the like.

If table data from the MIB of the network device are requested, the MOP according to the invention makes it possible to set up a filter for the purpose of reducing the network bandwidth to an even greater extent and optimizing the data processing since precisely those data from the network device that correspond to the configured command can be requested, compiled and transmitted, which command can take into account the existing network bandwidth, in particular. This is not possible in the case of an equivalent SNMP bulk request since here, as already described at the outset, a multiplicity of individual requests and the transmission of partial contents of the database must be carried out. This is because the desired table cannot be retrieved in a single request/response message interchange with a bulk SNMP request since this protocol does not define an end object identifier for the request and only supports a start identifier and the number of repetitions (also see FIG. 2).

In contrast, the MOP according to the invention forms the MIB building structure for an association with keys and values, wherein the keys represent the available nodes and the values represent the available branches of these nodes. These nodes can be retrieved in a single request via the MOP according to the invention.

According to the prior art, the management information base (MIB) is a data model that is very often linked to the widespread simple network management protocol (SNMP), a global standard protocol for managing devices in IP networks.

The solution according to the invention is based on a method of transmitting said MIB data and is not subject to the restrictions of current implementations (that is to say of the SNMP versions 1-3).

The MOP according to the invention achieves the advantages that there is less influence of network waiting times than would be possible using the SNMP. Minimum network traffic in comparison with SNMP is achieved. There is also the advantage that common HTTP applications are supported and there is an effortless transition from MIB-based SNMP implementations to the method of transmitting data according to the MOP. In addition, error handling that is extended in comparison with SNMP is supported in a further advantageous manner.

One development of the invention provides for the network management station to access the respective network device in a HTTP-based manner. Whereas the established and standard SNMP operates with UDP (user datagram protocol) as the transmission protocol and with a binary data format, the MOP according to the invention enables simple, HTTP-based client frameworks for accessing the MIB information.

The MOP according to the invention therefore advantageously enables a simple transition from MIB-based SNMP implementations. Since the MIB access level is frequently decoupled from the SNMP level, the implementers can directly access the MIB data in order to form a response according to the MOP. The MOP server can preferably run as a HTTP service and can use existing security and load balancing functions of the HTTP server.

One development of the invention provides for the requested data to be supplied by the management information base in a text data format. As a result, modern web browsers and web APIs can advantageously implement an MOP client. Whereas the fundamental protocol operation is based on the NETCONF RPC (remote procedure call) definition, the MOP according to the invention defines its own data model and its data representation level for representing the MIB data. Examples of a text data format are XML or JSON, but this list is not conclusive. Since the MOP according to the invention enables a simple transition from MIB-based SNMP implementations, the data format (text data format) was selected in such a manner that a direct assignment, in particular a 1:1 assignment, of the hierarchical MIB structure to the MOP data is possible.

As a further advantage, it should be mentioned that the MOP according to the invention enables a free allocation of error codes either to protocol operations or to MIB data objects, with the result that the restriction whereby SNMP response messages allow only a limited selection of error status codes has been advantageously removed. There is a direct assignment, in particular a 1:1 assignment, of SNMP to MOP error codes and this can be readily applied by the implementers. In order to support the extended error handling, that element that contains the data relating to an MIB object can be extended.

For explanation, reference is briefly made to the figures below.

FIG. 1 shows, by way of example, a network transport layer.

FIG. 2 shows, as already described at the outset, a table request for a network device from a network management station on the basis of SNMP, for example. The method according to the invention makes it possible to request exactly the required data (and therefore not to have to request more or less data). Therefore, no requests are advantageously made beyond the MIB nodes (see FIG. 2, SNMP “part of next table” and filter possibility).

FIG. 3 shows an MOP table request according to the invention, in which case it can be directly seen that the request can be made using a request based on a configurable command, as a result of which the compilation of the desired data (here table 1 and table 2, for example) and the compiled data are transmitted back to the network management station from the network device in one step.

FIG. 4 shows a comparison of the data according to MIB and the MOP according to the invention.

FIG. 5 finally shows an MOP data model (XSD schema) according to the invention. 

1. A method of transmitting data packets between a network management station monitoring a network and network devices of the network, the method comprising the steps of: installing agents on the network devices; the network management station communicating with the respective agent of a network device using commands; and the network management station accesses accessing a management information base of a network device using a configurable command and retrieving data packets corresponding to the configuration of the command.
 2. The method according to claim 1, wherein access is carried out in a HTTP-based manner.
 3. The method according to claim 1, further comprising the step of: supplying the requested data by the management information base in a text data format. 